Introduction

This Privacy Policy applies when you visit www.landlordinvest.com (“website”), https://platform.landlordinvest.com (“platform”), or any other landlordinvest.com online property. This policy explains what information will be collected by LandlordInvest Limited (“LLI” or “we” or “us”) when you access the website, platform or use LLI’s services, how the information will be used, how you can control the collection, correction and/or deletion of information, and how, in doing so, LLI complies with its legal obligations to you.

Please read this Privacy Policy carefully. By accessing and using our website and platform, you confirm that you have had an opportunity to read this Privacy Policy, that you understand it and that you agree to be bound by it. If you do not, you must immediately cease use of our website and platform, and any services provided by LLI.

We may amend this Privacy Policy from time to time to comply with applicable laws and regulations or to meet our changing business and/or regulatory requirements. You are encouraged to periodically review this page for the latest information and amendments to this Privacy Policy. By continuing to use our website or platform you agree to be bound by all updates and amendments.

About us

LandlordInvest Limited is a limited company registered in England and Wales under number 09245725 with the registered address 330 High Holborn, London, WC2A 1HL.

We are authorised and regulated by the Financial Conduct Authority (FCA) (FRN 660926).

We are also registered with the Information Commissioner’s Office (registration number ZA099073).

Our Data Protection Officer is Baljit Dhingra, who can be contacted at baljit@landlordinvest.com in relation to any question about this Privacy Policy or about how we handle your personal data.

How and when do we collect your information and what do we collect?

When you engage with us in any way, we may collect the following information about you through the methods of contact you choose to use when you engage with us:

1. information you provide through communications with us, whether in writing (including by letter or email) or on the telephone;
2. information you provide through our website or platform and through our application, verification and assessment processes
3. information we obtain through your engagement with us on Live Chat or social media, including on blogs, forums and through Twitter and Facebook; and
4. information provided on your behalf by your representatives or agents (“Agents”) who engage with us on your behalf in the ways described above.

We obtain information from outside sources to help us carry out our business functions. This information, which often contains personal data, includes:

1. information and reports from credit reference agencies (“CRAs”), insolvency practitioners and debt advisers; and
2. public records and other publicly available information sources.

If you wish to become a lender, or a borrower, or an Agent of the platform you will need to provide us with the following information, which we may also collect from third parties:

1. your personal details (including name, date of birth, current and previous postal addresses and National Insurance number);
2. your contact information (including phone, fax and email details);
   • (for borrowers and those representing borrowers) your business name and contact information;
3. financial information (including bank or building society account details used to make transfers on our platform);
4. information you provide in our registration or application processes (including, if you are a borrower, Agent or investor, certain personal data, identity verification, contact details and financial information about directors, partners, members, shareholders, beneficial owners and guarantors);
5. information you provide in your dealings with us and through your interaction with us;
6. if you are a borrower or a director, partner, member, shareholder, beneficial owner or guarantor of a borrower:
   • information about your business or company, such as previous credit applications and the conduct of your accounts, and similar personal credit information;
   • credit reference checks
   • electoral register information; and
   • fraud prevention information;
   • passwords and security question answers.

In addition to the personal and financial information you submit or we collect as described above, we may also collect information about your computer or device (including, where available, your IP address, operating system and browser type), your interaction with the platform and our website, and email performance data. We use this information for several reasons, including for marketing, for website and platform administration and for service improvement.

We also collect and retain copies of our correspondence with you as well as other data we collect relating to your activities on the platform and your arrangements with us.

When you visit our website or platform, cookies are used to collect technical information about the services that you use, and how you use them. For more information on the cookies used by us please see our Cookie Notice.

If you provide information about other people (for example, if you represent a borrower and you provide information about directors, partners, members, shareholders or beneficial owners other than yourself) then you confirm:

1. you have provided a copy of this Privacy Policy to those persons and you have ensured that they are aware of and understand the contents of this Privacy Policy; and
2. by providing information about other people, that you have all relevant permissions and authority (i) to make all those disclosures, (ii) to act on their behalf and (iii) in relation to partners, members, shareholders or beneficial owners of borrowers, to allow us to make credit checks at CRAs in respect of those persons.

How do we use your information?

We collect, store and use your personal data:

1. to inform you of website or platform developments and activity and of changes to our products and services;
2. to develop and improve our services, products and business, including analysing and improving our credit risk models and our customer service offering;
3. if you are a borrower (or a director, partner, member, shareholder, beneficial owner or guarantor of a borrower):
   • to determine your borrowing needs;
   • to assess your creditworthiness and to make credit-related decisions; and
   • if you miss any repayment of your loan, to trace your whereabouts and recover debts or enforce Security Documents;
4. to transfer money;
5. to carry out mandatory or other regulatory checks (including KYC and AML);
6. to comply with our legal and regulatory obligations;
7. to carry out statistical analysis and market research and testing;
8. to contact you (including by email) with products and services which we think may interest you (at all times taking into consideration your rights at law including your right to opt-out from receiving marketing from us);
9. to open accounts with us and to manage and maintain those accounts;
10. to verify your identity and the other information you have provided to us, including your bank or building society account information;
11. to update the records we hold about you from time to time;
12. to provide and administer the website, platform and our related services; and
13. for the prevention and detection of fraud or other illegal or criminal activity.

What is our legal basis for processing your personal data?

Personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Depending on the activity, we rely on the following lawful bases:

1. Performance of a contract – where processing is necessary to deliver services or meet contractual obligations, including obligations involving TransUnion.
2. Legal obligation – where processing is required to comply with applicable laws, regulatory requirements, or statutory obligations.
3. Legitimate interests – where processing is necessary for legitimate business purposes such as system security, fraud prevention, risk management, audit, and compliance, and where such interests do not override the rights and freedoms of individuals.
4. Consent – where required by law, and where individuals have been provided with a clear choice and the ability to withdraw consent at any time.

Where legitimate interests are relied upon, appropriate assessments are conducted to ensure that the rights and freedoms of data subjects are protected.

Legitimate interests pursued by the controller

Our legitimate interests include operating our business, fulfilling contractual obligations, ensuring system and data security, preventing fraud, supporting audit and compliance activities, and protecting TransUnion data. These interests are balanced against the rights and freedoms of individuals, with appropriate safeguards in place.

Do you have to provide your personal data?

The provision of certain personal data is primarily contractual and, in some circumstances, required to meet legal and regulatory obligations.

Personal data is required to:

1. enter into and perform contracts with customers, suppliers, or business partners;
2. process orders, manage accounts, and deliver goods and services;
3. verify identity and prevent fraud; and
4. comply with applicable legal, regulatory, accounting, and tax obligations.

If you choose not to provide the personal data we request:

1. we may be unable to enter into a contract with you;
2. we may be unable to fulfil orders, supply goods, or provide services;
3. we may be unable to conduct necessary verification, compliance, or fraud prevention checks; and
4. as a result, our services may be delayed, restricted, or declined.

Where personal data is requested for optional purposes, such as marketing communications, providing this data is not mandatory, and you may withdraw your consent at any time without affecting your ability to receive goods or services from us.

How do we disclose your information?

We may disclose your personal data to other registered investors of our marketplace, including:

1. to operate the platform and seek to match investors and borrowers;
2. in the Security Documents, when investors and borrowers are matched;
3. to provide transactional and performance information;
4. to provide relevant loan updates and
5. if required to enforce (or make preparations to enforce) any Security Documents.

We may disclose your personal data to:

1. to our suppliers, sub-contractors and third-party data processors, marketing and data analytics service providers, insolvency practitioners, professional advisers and persons who provide us with the following services: identification and fraud check, marketing, technology, platform support and back-up and business continuity;
2. with any third party you have asked us to share your personal data with, including social media sites if you have asked us to connect with your social media account;
3. to CRAs and fraud prevention agencies
4. to a third party if it acquires all or part of our business or assets in connection with the acquisition, or to a successor in interest in the event of our insolvency, winding up or liquidation;
5. if we are required to do so by applicable law and regulation, governmental, tax or regulatory body or law enforcement agency;
6. if you are represented by an Agent, to your Agent; and
7. to any other person with your prior consent to do so.

Third parties who process your personal data on our behalf are only permitted to process your personal data in accordance with our instructions and we will take steps to ensure that the transfer and any on-going processing by those third parties is carried out securely and in accordance with all and any applicable privacy laws.

Save as expressly provided above, or otherwise without your consent, we will not share your personal data with any third party.

Do we transfer personal data outside of the European Economic Area (EEA)?

We will only send your information outside of the EEA to:

1. comply with our legal and regulatory obligations; or
2. work with agents, contractors or advisers who we use to help run our product and/or services.

If we do transfer information to our agents, contractors or advisers outside of the EEA, we will put appropriate safeguards in place to ensure that such information is protected in the same way as if it was being used in the EEA.

How long do we keep your information for?

We only keep personal information for as long as reasonably necessary to fulfil the relevant purposes described in this Privacy Policy and in order to comply with our legal and regulatory obligations.

Where do we store your personal information?

We use data hosting service providers located in the United Kingdom to host the information we collect, and we implement technical safeguards to protect your information.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website and any transmission is at your own risk. For example, if you access the internet via an unsecure network. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Automated decision making and profiling

We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management.

These tools may analyse personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review.

The use of these tools may influence the speed or level of review applied to an application or request, but individuals will not be subject to automatic rejection or adverse decisions without human involvement.

Credit reference and affordability checks

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs). We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

1. Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 742313).
2. TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 737740).

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

1. Creditsafe Transparency Notice | Customers & Suppliers: https://www.creditsafe.com/gb/en/legal/transparency-notice-customer-supplier.html
2. TransUnion Bureau Privacy Notice: https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

Your rights

You have the following rights in relation to your personal data:

1. Right to erasure (“right to be forgotten”) – you have the right to request that we delete your personal data where there is no lawful reason for us to continue processing it.
2. Right to restrict processing – you have the right to request that we limit how we use your personal data in certain circumstances.
3. Right to data portability – you have the right to receive your personal data in a structured, commonly used, and machine readable format, and to request that we transfer it to another organisation where technically feasible.
4. Right to object – you have the right to object to the processing of your personal data where we rely on legitimate interests or where data is used for direct marketing.

To exercise any of these rights, please contact us at security@landlordinvest.com or contact our Data Protection Officer at baljit@landlordinvest.com.

Third Parties

We take appropriate technical and organisational measures to safeguard the personal data that you provide to us, but we accept no liability if communications are intercepted by third parties or incorrectly delivered or not delivered.

If we transfer your information to third parties we will take steps to ensure that the transfer and any on-going processing by those third parties is carried out securely and in accordance with applicable privacy laws.

The website and platform contain links to other websites operated by third parties. This Privacy Policy applies only to the personal data that LLI collects and we are not responsible for personal data that third parties may collect, store and use through other websites.

How to complain

If you want to make a complaint about how we have handled your personal information, please contact us at security@landlordinvest.com and we will investigate the matter and report back to you.

If you are still not satisfied after our response or believe we are not using your personal information in line with the law, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (https://ico.org.uk).

This Privacy Policy was last updated: 29 July 2026